Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/998e3025-94aa-3d5e-bbc6-7f3ea87c3c27.roa
File: 998e3025-94aa-3d5e-bbc6-7f3ea87c3c27.roa (raw, json)
Hash identifier: mx0AnDZJ94j27F2OOQTeGzedKWQL/8t9gfRpgf17tf0=
Subject key identifier: CB:8D:6B:7A:12:52:FA:3F:DF:31:2B:C2:6F:D5:9C:A5:56:D9:08:5A
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584843212F04B3881BDF286E7F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/998e3025-94aa-3d5e-bbc6-7f3ea87c3c27.roa
Signing time: Thu 19 Dec 2024 21:12:54 +0000
ROA not before: Thu 19 Dec 2024 21:12:54 +0000
ROA not after: Wed 19 Mar 2025 20:12:54 +0000
asID: 6167
IP address blocks: 2600:1016:b149::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:43:21:2f:04:b3:88:1b:df:28:6e:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 19 21:12:54 2024 GMT
Not After : Mar 19 20:12:54 2025 GMT
Subject: CN=b3a15a81-9558-4aa0-9759-a7ea1ffded61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c9:62:83:b6:d1:2c:c2:db:4b:e9:14:08:64:
ae:9d:1c:af:27:7a:00:ad:c2:21:be:3f:89:04:ec:
a8:12:94:46:f6:4f:c5:40:11:42:c9:79:6e:33:b2:
e8:7d:0b:a7:38:56:00:df:57:4a:de:76:5a:d0:1a:
32:cc:f7:1e:aa:c2:a7:29:be:ee:db:00:13:4b:aa:
ad:c5:96:a2:a3:4a:d4:9e:3b:10:80:9b:d1:81:9a:
f9:12:ef:42:c1:da:98:c0:6a:12:87:b1:d0:e2:11:
92:1b:87:d1:4f:30:89:66:0f:fd:2d:cd:23:95:58:
f0:d5:b5:7b:4c:2f:2c:0c:88:c5:47:f6:0a:f6:f0:
f4:03:c0:34:40:ca:d8:c1:d6:aa:8b:60:86:6e:70:
a8:5d:ac:eb:fa:62:43:c0:42:ab:59:77:84:a9:4a:
7d:76:96:cf:b0:87:48:86:c7:f2:2e:67:58:25:33:
9a:1c:54:57:11:35:fd:58:92:40:2f:d1:d1:86:88:
59:0d:6b:61:e2:ea:95:be:3e:cb:92:2d:53:5b:97:
7b:c3:0a:53:60:b7:5c:66:5b:0c:b4:ef:4e:58:68:
44:6d:5f:27:3d:a3:46:1f:7e:06:8e:e4:26:59:e7:
76:7f:2e:19:4c:d0:47:10:09:08:2d:20:88:11:ca:
ea:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8D:6B:7A:12:52:FA:3F:DF:31:2B:C2:6F:D5:9C:A5:56:D9:08:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/998e3025-94aa-3d5e-bbc6-7f3ea87c3c27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1016:b149::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:53:af:26:a9:db:cc:96:49:c0:bb:50:3d:49:0b:58:55:d6:
f6:37:e2:d7:95:de:99:76:06:a5:9d:cf:b4:03:10:f3:32:74:
54:44:86:c2:75:93:2f:01:7b:87:ef:d9:69:8e:8e:a4:01:ec:
48:e1:37:3c:75:f3:52:59:13:87:fa:01:08:e3:85:6c:57:1e:
6a:c5:14:64:7c:2b:8a:f6:08:78:92:ba:14:a1:af:a1:a9:a6:
f7:67:22:1c:45:95:6f:ba:ff:e1:e9:ef:ce:20:07:5b:0b:2b:
42:aa:32:68:d0:41:04:58:86:f1:b2:5c:3b:43:a5:c4:e9:14:
5b:ec:1a:c3:ca:d6:73:e0:0f:14:ce:88:5f:5e:99:3a:77:5a:
f2:00:54:a5:dd:d9:a7:b3:4f:ab:f9:28:0e:16:83:6e:0e:77:
68:80:aa:e7:7d:82:95:41:92:1c:6a:5f:d6:3b:75:1a:33:42:
ee:12:34:f7:92:2f:de:33:10:76:35:2a:1f:f3:56:f8:6d:9a:
cd:00:95:40:af:1d:29:a0:b4:18:6c:fc:c3:f0:52:b5:bb:db:
c8:e8:54:07:13:89:42:70:ca:e5:62:93:cc:7f:95:93:22:a3:
47:5e:e5:ba:bf:ec:5b:38:c0:67:cd:fb:83:b4:8d:db:50:37:
a6:45:01:bb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhDIS8Es4gb3yhufwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxOTIxMTI1NFoXDTI1MDMxOTIwMTI1NFowLzEtMCsGA1UEAxMk
YjNhMTVhODEtOTU1OC00YWEwLTk3NTktYTdlYTFmZmRlZDYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8lig7bRLMLbS+kUCGSunRyvJ3oArcIhvj+J
BOyoEpRG9k/FQBFCyXluM7LofQunOFYA31dK3nZa0BoyzPceqsKnKb7u2wATS6qt
xZaio0rUnjsQgJvRgZr5Eu9CwdqYwGoSh7HQ4hGSG4fRTzCJZg/9Lc0jlVjw1bV7
TC8sDIjFR/YK9vD0A8A0QMrYwdaqi2CGbnCoXazr+mJDwEKrWXeEqUp9dpbPsIdI
hsfyLmdYJTOaHFRXETX9WJJAL9HRhohZDWth4uqVvj7Lki1TW5d7wwpTYLdcZlsM
tO9OWGhEbV8nPaNGH34GjuQmWed2fy4ZTNBHEAkILSCIEcrqiQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMuNa3oSUvo/3zErwm/VnKVW2QhaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTk4ZTMwMjUtOTRhYS0z
ZDVlLWJiYzYtN2YzZWE4N2MzYzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQFrFJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFRTryap28yWScC7UD1JC1hV1vY34teV3pl2BqWdz7QDEPMydFRE
hsJ1ky8Be4fv2WmOjqQB7EjhNzx181JZE4f6AQjjhWxXHmrFFGR8K4r2CHiSuhSh
r6GppvdnIhxFlW+6/+Hp784gB1sLK0KqMmjQQQRYhvGyXDtDpcTpFFvsGsPK1nPg
DxTOiF9emTp3WvIAVKXd2aezT6v5KA4Wg24Od2iAqud9gpVBkhxqX9Y7dRozQu4S
NPeSL94zEHY1Kh/zVvhtms0AlUCvHSmgtBhs/MPwUrW728joVAcTiUJwyuVik8x/
lZMio0de5bq/7Fs4wGfN+4O0jdtQN6ZFAbs=
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:16:57 2025 by rpki-client